vinamra
|
aedd40ced5
|
Adds http-vuln-cve2017-1001000. Closes #775
|
2017-06-01 19:08:23 +00:00 |
|
dmiller
|
edd0676e4b
|
Use canonical IP validation function from ipOps.lua. Fixes #889
|
2017-06-01 17:45:08 +00:00 |
|
dmiller
|
8d04c3b850
|
Avoid a crash if ldap decode fails in sslcert. See #888
|
2017-06-01 17:45:07 +00:00 |
|
paulino
|
ba992765b3
|
Closes smb connection properly.
|
2017-05-29 19:48:35 +00:00 |
|
paulino
|
850ae6ef52
|
Instead of requesting less information, let's try access level 2 first then fallback to 1 if necessary.
|
2017-05-29 19:47:26 +00:00 |
|
paulino
|
c5d8dc32d5
|
Adds smb-vuln-ms17-010 to detect a critical remote code execution vulnerability affecting SMBv1 servers in Microsoft Windows systems.
|
2017-05-27 07:57:34 +00:00 |
|
paulino
|
b0228a212b
|
Updates smb.lua and msrpc.lua to support fully qualified path names as share names and updates match for OID. Modern Windows versions require FQPN and older version work the same. The level of information requested with the call NetShareGetInfo was reduced to support newer versions of Windows. This closes #266, closes #704, closes #238, and closes #883.
|
2017-05-27 07:28:44 +00:00 |
|
dmiller
|
c3bf58b2f2
|
Fix a typo. Closes #884
|
2017-05-21 02:58:08 +00:00 |
|
dmiller
|
abb0bf663f
|
Clarify an assertion
|
2017-05-19 19:03:33 +00:00 |
|
dmiller
|
3a7f446b90
|
Avoid empty rules interpreted as all scripts in the script dir.
|
2017-05-19 19:03:33 +00:00 |
|
paulino
|
7f2b6d2eb4
|
Adds signature for various xmeye/cheap chinese made ip cams. Closes #873
|
2017-05-11 06:32:39 +00:00 |
|
fyodor
|
6e18fd75ed
|
Added PDF export of Nmap-Third-Party-Open-Source.fodt. I think we should maintain a PDF version too so we can link to it even for folks who don't have OpenOffice.
|
2017-05-10 23:50:54 +00:00 |
|
paulino
|
bdb0d89648
|
Adds version detection signatures for Apache HBase and Hadoop MapReduce
|
2017-05-09 19:52:28 +00:00 |
|
paulino
|
c51c0b6e86
|
Updates script to detect other vulnerable services and removes useless redirection ports from the execution rule. See GH#876
|
2017-05-09 17:24:55 +00:00 |
|
dmiller
|
edbb4c90ed
|
Process 124 service fingerprints
|
2017-05-09 16:12:05 +00:00 |
|
paulino
|
7bd54ab098
|
Adds http-vuln-cve2017-5689 to detect vulnerable Intel AMT enabled systems (INTEL-SA-00075). Closes #876
|
2017-05-07 01:33:57 +00:00 |
|
paulino
|
6274868dee
|
Renames memcached probe and adds a new match for Apache ZooKeeper
|
2017-05-05 00:03:31 +00:00 |
|
dmiller
|
95850d5ac3
|
New script vmware-version
|
2017-05-03 18:22:02 +00:00 |
|
dmiller
|
8649f07a7c
|
noshutdown handling was missing for connect mode
|
2017-05-03 03:56:41 +00:00 |
|
dmiller
|
e09cb62439
|
Only report warning about ratelimits when filtered ports exist
|
2017-05-02 20:36:08 +00:00 |
|
dmiller
|
4b65a1a247
|
Process 188 service fingerprints
|
2017-05-02 20:06:34 +00:00 |
|
dmiller
|
0022c5021b
|
Some formatting fixups for README.md
|
2017-04-30 13:18:07 +00:00 |
|
dmiller
|
49ba383eee
|
Avoid crash if AuthMethod key is not set in iscsi handshake. Fixes #631
|
2017-04-30 13:18:06 +00:00 |
|
fyodor
|
78f8b39b92
|
Add further clarification to the Nmap license summary in the new README.md
|
2017-04-30 01:56:39 +00:00 |
|
nnposter
|
d478199ada
|
Allows cookies to have unrecognized attributes (see RFC 6265, Section 5.2). Fixes #866
|
2017-04-29 14:36:46 +00:00 |
|
nnposter
|
0b36ba5cea
|
Allows unquoted cookie values to contain whitespace, as defined in RFC 6265. Fixes #844
|
2017-04-29 14:05:57 +00:00 |
|
david
|
6d8a64423f
|
dnscurve.org has https.
|
2017-04-28 18:43:38 +00:00 |
|
dmiller
|
5953b817ac
|
A couple tests for http.lua; see #844
|
2017-04-27 17:28:46 +00:00 |
|
dmiller
|
ab5e247cee
|
Include netutil.h for IPPROTO_SCTP constant where necessary. Fixes #868
|
2017-04-26 18:55:16 +00:00 |
|
nnposter
|
c324237cf0
|
Converts the login check from a negative test to a positive one (Apache Axis2)
|
2017-04-25 23:06:38 +00:00 |
|
nnposter
|
2a07563f1d
|
Simplifies a match pattern
|
2017-04-25 21:41:43 +00:00 |
|
dmiller
|
b2ed1d58b5
|
Process 129 service fingerprints
|
2017-04-24 20:05:46 +00:00 |
|
dmiller
|
b3849c478c
|
New script arg vulns.short
|
2017-04-24 13:53:47 +00:00 |
|
dmiller
|
4307615b50
|
Update snmp scripts with backwards-compatible script-arg syntax
|
2017-04-22 19:31:25 +00:00 |
|
dmiller
|
13d06eb738
|
Use creds username as SNMP community if no ':' indicates password. Fixes #862
|
2017-04-22 19:31:24 +00:00 |
|
dmiller
|
8f3137bac7
|
Add a README.md for Github
|
2017-04-21 19:47:50 +00:00 |
|
dmiller
|
69084bbd38
|
Update scripting documentation
|
2017-04-21 15:13:08 +00:00 |
|
dmiller
|
c8d5cf86b2
|
Correct reference to snmpcommunity script-arg. Fixes #861
|
2017-04-21 13:28:55 +00:00 |
|
dmiller
|
87991d57a2
|
Revert an incorrect change from r36730
|
2017-04-21 13:10:23 +00:00 |
|
dmiller
|
e813de759a
|
Reduce use of utils.h for error functions
|
2017-04-20 22:39:08 +00:00 |
|
dmiller
|
0ff217dc53
|
Re-add some needed includes on Windows
|
2017-04-20 17:24:33 +00:00 |
|
nnposter
|
6d3eac9d3b
|
Puts together recent CHANGELOG entries related to http.lua
|
2017-04-19 19:18:21 +00:00 |
|
dmiller
|
86edcb0e5b
|
Remove some unused includes
|
2017-04-19 19:06:47 +00:00 |
|
nnposter
|
920fc785b0
|
Adds a CHANGELOG entry for commits r36722-r35725
|
2017-04-19 19:03:40 +00:00 |
|
nnposter
|
b9aac1d6ba
|
Cleans up inline documentation for the default HTTP redirect behavior. Fixes #831
|
2017-04-19 18:42:51 +00:00 |
|
nnposter
|
cfa57758ad
|
Changes the redirect rule to return false in case of a missing path. This
change aligns the code with the corresponding comment. Fixes #830
|
2017-04-19 18:39:20 +00:00 |
|
nnposter
|
ab96f9c2e7
|
Corrects a default HTTP redirect rule for hostname/domain matching. Fixes #829
|
2017-04-19 18:35:31 +00:00 |
|
nnposter
|
17c37b7e8d
|
Corrects a default HTTP redirect rule:
A redirect should not be carried out if credentials are embedded in the URL.
Fixes #826
|
2017-04-19 18:30:13 +00:00 |
|
dmiller
|
256378df5c
|
Fix up some more header includes
|
2017-04-19 18:18:38 +00:00 |
|
nnposter
|
e80976a13a
|
Provides a common function, url.get_default_port(), for obtaining
the default port number for a given scheme. Fixes #781
|
2017-04-19 18:00:36 +00:00 |
|